Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E92DAA92DC11EF8785BEA0762E951A.roa
File: 10E92DAA92DC11EF8785BEA0762E951A.roa (raw, json)
Hash identifier: ixhuYDlrIuM2YZ8SpBy6T3keqRmQm2//SUvhyNke2oA=
Subject key identifier: D8:81:3D:98:10:67:10:A7:5B:72:72:13:BE:5B:2B:4D:7A:36:A0:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01021E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E92DAA92DC11EF8785BEA0762E951A.roa
Signing time: Fri 25 Oct 2024 14:18:55 +0000
ROA not before: Fri 25 Oct 2024 14:18:51 +0000
ROA not after: Sun 01 Dec 2024 14:18:51 +0000
asID: 49505
IP address blocks: 154.211.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66078 (0x1021e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:18:51 2024 GMT
Not After : Dec 1 14:18:51 2024 GMT
Subject: CN=671ba8ce-47cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:e8:29:67:b3:37:8d:7e:15:7a:d1:10:cc:
62:44:11:57:6e:5e:da:1c:8b:c8:99:af:e7:3e:0f:
b2:f9:1e:d0:32:99:df:52:01:6e:d1:65:09:d0:37:
3c:a9:4f:48:6b:d1:b2:d8:0e:84:f7:25:19:2d:4f:
67:08:52:b9:3b:f7:54:30:0b:55:13:7c:89:85:2e:
52:01:44:1b:4e:e3:b1:b5:5e:9c:7e:87:44:c2:ca:
6e:5f:0a:92:12:27:52:65:f2:b4:c9:a5:c1:66:a0:
eb:cc:54:72:e8:80:ba:8b:31:a6:44:5a:ad:b7:1d:
0d:b9:1e:f1:fa:eb:85:1c:e1:2a:02:3f:ee:9a:64:
f8:f0:72:c2:42:c5:13:f1:66:d1:58:0b:8a:4d:fb:
24:8a:ed:ea:90:7e:ef:50:fa:17:ed:1c:be:74:d8:
6d:b7:d2:33:05:f6:7c:24:48:61:0f:ac:43:8a:f3:
fc:4b:c6:ad:41:52:4a:e8:a0:23:9e:75:66:40:51:
ed:a0:5d:dd:ec:15:d7:45:52:c6:68:06:32:8e:4b:
bc:8e:53:9a:ef:42:0f:8d:c2:30:ce:31:13:8c:1b:
14:49:f0:c6:df:90:5c:b1:98:1a:c0:4b:7e:f6:74:
a2:d6:06:92:ee:47:b5:d7:0e:b6:0c:78:e2:4d:dd:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:3D:98:10:67:10:A7:5B:72:72:13:BE:5B:2B:4D:7A:36:A0:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E92DAA92DC11EF8785BEA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:25:f8:7d:95:ad:77:32:ae:c1:fb:38:13:6b:de:35:8e:ff:
e9:cd:0e:e2:f9:8b:fb:51:1a:5e:fb:e6:90:1e:93:54:35:1d:
fe:a4:03:44:63:09:0b:3e:75:dd:1d:27:e9:cb:66:bc:b3:92:
fd:d8:92:b4:bc:2d:f6:2a:4d:65:40:0f:aa:51:a1:c8:26:75:
74:5f:1e:ed:37:ad:e0:05:7e:bb:86:2b:23:25:b2:93:93:68:
69:e9:ff:d9:0c:ca:69:de:31:a1:3b:d8:20:7e:b4:83:8d:1c:
97:a8:6e:85:4f:49:75:32:50:aa:34:95:d1:d6:ab:0e:ce:e9:
27:dd:fa:24:2f:4e:55:60:47:9f:31:e7:c9:35:ce:ac:4d:dd:
af:f5:52:55:7b:1a:58:97:b8:67:9c:d2:2e:25:07:d9:94:37:
b3:cd:8f:e9:62:db:ac:e8:3e:7b:d2:9c:2f:7d:8e:7d:1c:14:
13:d6:34:60:ab:3c:62:26:d9:2a:03:34:61:4f:44:7f:48:bd:
0d:c1:6a:52:6d:13:92:0f:1b:21:b5:22:50:44:59:ae:6c:b6:
61:93:4c:04:d1:56:3c:94:4a:90:3c:6d:41:7e:79:e8:8c:de:
d5:ba:0b:88:1d:f2:8e:5e:f1:10:12:0d:90:a3:e6:b7:81:4f:
fe:34:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:56 2024 by rpki-client on console-ams.rpki-client.org